Apparatus and method for maintaining security of video data

Abstract

The method comprises registering at least one of an internet protocol (IP) address and a media access control (MAC) address of the security devices, generating a plurality of public key and private key pairs, encrypting and storing private keys comprised in the plurality of public key and private key pairs using a master key provided from a master key management unit, selecting any one of a plurality of public key and private key pairs when the access of the security device is approved and providing a certificate comprising the selected public key to the security device, receiving a symmetric key encrypted with the public key of the certificate from the security device, and decrypting the private key using the master key provided from the master key management unit.

What is claimed is: 
     
       1. A method for decrypting video data of a decryption server that comprises a communication unit and a processor connected to the communication unit, the communication unit being connected to a video control device and a plurality of security devices for encrypting video data of photographing devices, the method comprising:
 registering at least one of an internet protocol (IP) address and a media access control (MAC) address of the security devices; 
 generating a plurality of public key and private key pairs; 
 encrypting and storing private keys comprised in the plurality of public key and private key pairs using a master key provided from a master key management unit, and deleting original data of the private keys; 
 receiving an access request from the security device; 
 determining whether or not to approve the access of the security device by comparing at least one of the IP address and the MAC address checked in the access request with information registered in advance; 
 selecting any one of a plurality of public key and private key pairs when the access of the security device is approved and providing a certificate comprising the selected public key to the security device; 
 receiving a symmetric key encrypted with the public key of the certificate from the security device; 
 decrypting the private key using the master key provided from the master key management unit; and 
 decrypting the encrypted symmetric key using the decrypted private key. 
 
     
     
       2. The method of  claim 1 , wherein
 each of the plurality of public key and private key pairs is assigned to a different security device, and a certificate comprising a different public key is provided to each of the security devices. 
 
     
     
       3. The method of  claim 1 , further comprising:
 forming a proxy channel with the security device; and 
 transmitting and receiving a control signal and video data through the proxy channel, 
 wherein the video data is encrypted and decrypted by the symmetric key. 
 
     
     
       4. The method of  claim 3 , wherein
 the transmitting and receiving of the control signal and video data through the proxy channel further comprises
 generating a first thread for processing a request from the video control device, 
 receiving the control signal from the video control device using the first thread, and 
 transmitting the control signal to the security device using the first thread. 
 
 
     
     
       5. The method of  claim 4 , wherein
 the transmitting and receiving of the control signal and video data through the proxy channel further comprises
 generating a second thread for processing the video data obtained from the photographing device, 
 receiving encrypted video data from the security device using the second thread, 
 decrypting the encrypted video data using the second thread with the symmetric key, and 
 transmitting the video data decrypted using the second thread to the video control device.